Overview

overview

10

Static

static

3

96f00c2a0e...6N.exe

windows7-x64

10

96f00c2a0e...6N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    96f00c2a0e521d6f9c3bb377b264735135130843dd4f31c017491f51808c6596N.exe

  • Size

    78KB

  • Sample

    241204-jgeb9axrbw

  • MD5

    5e89b0338575ddd2be5c11790cef6610

  • SHA1

    f0e5e9cbda347a1e7e30c4af945c3bc72c96d286

  • SHA256

    96f00c2a0e521d6f9c3bb377b264735135130843dd4f31c017491f51808c6596

  • SHA512

    e5754a544c49b7441975c98bb1119a31fb531638d3307a438e882486e47534ba6d0bdf19ffe7b1ebd8cf7bd0bfe9451dafd705d030bbf52f6ef4c9daf5a1ba20

  • SSDEEP

    1536:SvWV58/pJywt04wbje3IgTazcoOEEQLwdCRoaeuProYMHQti6d9/2K1Zg:sWV58BJywQjDgTLopLwdCFJzF9/2J

Score
10/10
metamorpherratdiscoveryratstealertrojan

Malware Config

Targets

    • Target

      96f00c2a0e521d6f9c3bb377b264735135130843dd4f31c017491f51808c6596N.exe

    • Size

      78KB

    • MD5

      5e89b0338575ddd2be5c11790cef6610

    • SHA1

      f0e5e9cbda347a1e7e30c4af945c3bc72c96d286

    • SHA256

      96f00c2a0e521d6f9c3bb377b264735135130843dd4f31c017491f51808c6596

    • SHA512

      e5754a544c49b7441975c98bb1119a31fb531638d3307a438e882486e47534ba6d0bdf19ffe7b1ebd8cf7bd0bfe9451dafd705d030bbf52f6ef4c9daf5a1ba20

    • SSDEEP

      1536:SvWV58/pJywt04wbje3IgTazcoOEEQLwdCRoaeuProYMHQti6d9/2K1Zg:sWV58BJywQjDgTLopLwdCFJzF9/2J

    Score
    10/10
    metamorpherratdiscoveryratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Metamorpherrat family

      metamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks